Roman Arutyunyan 7362d01658 Mp4: fixed buffer underread while updating stsz atom. ...

While cropping an stsc atom in ngx_http_mp4_crop_stsc_data(), a 32-bit integer
overflow could happen, which could result in incorrect seeking and a very large
value stored in "samples".  This resulted in a large invalid value of
trak->end_chunk_samples.  This value is further used to calculate the value of
trak->end_chunk_samples_size in ngx_http_mp4_update_stsz_atom().  While doing
this, a large invalid value of trak->end_chunk_samples could result in reading
memory before stsz atom start.  This could potentially result in a segfault.

2024-08-12 18:20:43 +04:00

auto

Configure: fixed building libatomic test.

2024-05-16 11:15:10 +02:00

conf

MIME: added image/avif type.

2021-10-25 20:49:15 +03:00

contrib

Contrib: vim syntax, update core and 3rd party module directives.

2023-07-24 18:04:41 +03:00

docs

Typo fixed.

2024-08-09 19:12:23 +04:00

misc

Updated OpenSSL and zlib used for win32 builds.

2024-02-14 15:55:42 +04:00

src

Mp4: fixed buffer underread while updating stsz atom.

2024-08-12 18:20:43 +04:00

.hgtags

release-1.27.0 tag

2024-05-28 17:22:30 +04:00

Description

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

78 MiB

Languages

C 97.6%

Vim Script 1.8%

XS 0.4%

Perl 0.1%